Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File: y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier: ufnVu0qOUauki8cOLSQyjeocBz/BjY18+rvLgFufCBY=
Subject key identifier: EF:00:96:DE:3D:9B:94:34:2D:59:9B:78:09:83:13:F7:D4:0C:2D:F0
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 019D27044C6D84B52F2E81E75952688B031C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number: 1094
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: FSVSgLOIDHB0tEHVWTFzxIji-0o.roa (hash: 9yWQzAfv05KEhodz5VlR9pyMWpBEu5c3XhVdOB7ou5U=)
2: QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa (hash: Se8X87fnlsQ0jSr5BHgV/YmjxoXoJdb5PZSQdKSye9w=)
3: m4rs5cnwWBMbt76R1xpp4mTXG1U.roa (hash: xc1fI9WY5WV26D6LeKOgGd9/V7vnRh4zOrQlPCPXcyA=)
4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: 0TYup6pteMxXnyJGGZbUSJqN4LxhhWe94gam/MakYoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4c:6d:84:b5:2f:2e:81:e7:59:52:68:8b:03:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=ef0096de3d9b94342d599b78098313f7d40c2df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:c7:77:1c:69:6d:ba:39:02:40:44:b5:2f:
d3:3a:02:52:bc:86:c9:e5:ec:11:4f:80:9e:71:2a:
54:11:c3:14:3c:d4:be:91:ed:36:94:5e:10:d9:80:
94:82:2c:a8:ec:f4:ad:76:dc:b4:7d:80:ff:91:fa:
cf:6f:5a:d4:38:96:71:e7:2c:69:47:6a:a4:21:3d:
4c:7f:38:d1:4b:9c:c8:8a:b3:27:e5:d2:5e:78:89:
95:48:e3:03:f6:4e:56:7f:d9:b7:ef:6e:56:b9:d0:
ab:ca:f3:00:90:7c:71:c9:1b:52:2c:5b:11:08:c9:
ef:03:e7:0f:fb:0b:5e:61:d9:5c:54:f3:98:52:2f:
de:43:f6:4c:f0:82:fa:0f:f3:2d:03:4d:da:57:6a:
ec:dd:29:30:f7:8e:65:6e:5b:d0:77:0f:34:27:58:
1b:83:29:86:ca:92:1a:22:05:43:af:1d:3d:6b:6b:
e0:55:90:ab:fe:c0:b6:a2:01:30:43:fc:1d:91:6a:
3c:27:37:78:fb:3c:d3:c5:8a:55:e1:26:c0:3a:26:
64:ec:12:bc:ca:81:9a:98:54:18:eb:70:a0:0a:4d:
39:71:b8:eb:58:03:1a:fd:3c:1e:cc:91:73:78:9f:
39:87:0b:f5:07:0e:63:4b:e4:44:a6:a9:a5:f6:7f:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:00:96:DE:3D:9B:94:34:2D:59:9B:78:09:83:13:F7:D4:0C:2D:F0
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4e:84:cd:b4:30:4c:fc:d3:3d:e2:b0:fc:0b:cd:bd:88:7c:
8c:e8:f4:cd:3c:ca:c8:79:5a:b5:af:3a:14:c5:6c:03:70:e3:
90:ae:68:d1:fe:de:36:d5:ee:52:ea:88:21:eb:6f:47:65:06:
17:87:ee:ce:32:64:9c:49:01:a1:3e:c2:d4:32:7e:0c:d1:02:
43:2f:fe:cb:1d:09:ff:8e:13:23:b5:6c:59:23:fe:5e:ba:0a:
0c:72:3b:77:94:df:8b:fa:eb:bd:21:40:6d:e9:98:8d:41:bc:
cd:fe:f4:16:f7:13:65:6a:a8:df:6b:74:bb:86:c8:7c:a4:dd:
33:ca:58:bf:7b:b1:f0:f1:9b:b0:52:bf:08:70:8c:7b:ff:12:
6b:30:47:ee:fc:50:79:e9:a6:dd:a7:37:8e:78:e8:54:99:4a:
ac:5c:a7:15:ad:d4:b9:75:52:72:63:5b:94:09:5d:de:40:6a:
52:fa:e3:12:a4:4d:2b:0d:6a:a7:7b:a4:15:a7:34:67:63:82:
50:c0:59:75:96:5b:9f:54:31:e0:d8:59:73:f3:c6:f7:95:f6:
c6:77:91:ba:f3:ab:ce:79:67:c9:58:bb:24:4b:84:e4:31:67:
79:ca:6b:c2:60:f5:b5:dd:a9:29:e5:76:b7:b5:27:74:e8:21:
6c:56:40:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:31 2026 by rpki-client